CVE-2020-19587 - Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI

Back Back to CVE browser

MEDIUM

Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI

Published Sep 14, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.92%

Description

Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11491
Advisory
https://github.com/Deepak983/CVE-2020-19587/blob/main/_Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf
x_refsource_MISCExploitTechnical DescriptionThird Party Advisory
https://www.linkedin.com/in/deepak-sharma-72a044b4/
x_refsource_MISCPermissions RequiredThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11491		Advisory
https://github.com/Deepak983/CVE-2020-19587/blob/main/_Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf		x_refsource_MISCExploitTechnical DescriptionThird Party Advisory
https://www.linkedin.com/in/deepak-sharma-72a044b4/		x_refsource_MISCPermissions RequiredThird Party Advisory